Whatsapp не работает через wifi mikrotik
Mon Jan 14, 2019 12:18 am
Hi
I am having issues with WhatsApp being blocked. I have added all the ports it needs or what it seems it needs but still does not work.
Here is my config if anyone can see anything that looks wrong.
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.1.1-192.168.1.254
add name=vpn ranges=192.168.89.2-192.168.89.255
add name=l2tp ranges=192.168.100.1-192.168.100.30
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/ppp profile
add local-address=192.168.100.1 name=lt2p1 remote-address=l2tp
set *FFFFFFFE dns-server=192.168.1.100 local-address=dhcp remote-address=vpn
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp-sfpplus1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface l2tp-server server
set default-profile=lt2p1 enabled=yes ipsec-secret+=@@@@@@@@@@ use-ipsec=yes
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=»ether1 — WAN» list=WAN
/interface pptp-server server
set enabled=yes
/interface sstp-server server
set default-profile=default-encryption enabled=yes
/ip address
add address=192.168.1.100/24 comment=defconf interface=ether2 network=192.168.1.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=»ether1 — WAN»
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf dns-server=208.67.222.123,208.67.220.123 gateway=192.168.1.100 netmask=24
add address=192.168.80.0/24 comment=»VPN- dhcp» dns-server=192.168.1.100 gateway=192.168.1.100 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.1.100 name=router.lan
/ip firewall filter
add action=accept chain=input comment=»defconf: accept established,related,untracked» connection-state=established,related,untracked
add action=accept chain=input comment=»allow IPsec NAT» dst-port=4500 protocol=udp
add action=accept chain=input comment=»allow IKE» dst-port=500 protocol=udp
add action=accept chain=input comment=»allow l2tp» dst-port=1701 protocol=udp
add action=accept chain=input comment=»allow pptp» dst-port=1723 protocol=tcp
add action=accept chain=input comment=»allow sstp» dst-port=443 protocol=tcp
add action=accept chain=input comment=»HTTP WAN Admin» dst-port=80 protocol=tcp
add action=accept chain=input comment=winbox dst-port=8291 protocol=tcp
add action=accept chain=forward comment=»Whatsapp tcp» dst-port=443,4244,5222,5223,5228,5242,8443 out-interface-list=WAN protocol=tcp
add action=accept chain=forward comment=»whatsapp 2″ dst-port=59234,50318 protocol=tcp
add action=accept chain=forward comment=»defconf: accept out ipsec policy» ipsec-policy=out,ipsec
add action=accept chain=forward comment=»whatsapp udp1″ dst-port=59234,50318 protocol=udp
add action=accept chain=forward comment=»defconf: accept in ipsec policy» ipsec-policy=in,ipsec
add action=accept chain=forward comment=»whatsapp udp 2″ dst-port=3478,45395 protocol=udp
add action=accept chain=input comment=»defconf: accept ICMP» protocol=icmp
add action=accept chain=forward comment=»defconf: accept established,related, untracked» connection-state=established,related,untracked
add action=drop chain=input comment=»defconf: drop invalid» connection-state=invalid
add action=drop chain=input comment=»defconf: drop all not coming from LAN» in-interface-list=!LAN
add action=fasttrack-connection chain=forward comment=»defconf: fasttrack» connection-state=established,related
add action=drop chain=forward comment=»defconf: drop invalid» connection-state=invalid
add action=drop chain=forward comment=»defconf: drop all from WAN not DSTNATed» connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment=»defconf: masquerade» ipsec-policy=out,none out-interface-list=WAN
add action=masquerade chain=srcnat comment=»masq. vpn traffic» src-address=192.168.89.0/24
add action=redirect chain=dstnat dst-address-type=!local dst-port=!53 protocol=udp to-addresses=0.0.0.0 to-ports=53
/system clock
set time-zone-name=Europe/London
/system routerboard settings
set silent-boot=no
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Re: Whatsapp video being blocked
Mon Jan 14, 2019 8:31 am
I did have the same problem at my previous house. Whatsapp text and voice message worked fine, but no video call.
It was my ISP that did block something. Changing location, all ok.
Try to find what outging port that are needed. Some like this:
Try Splunk> to monitor your MikroTik Router(s). How to set it up.
Re: Whatsapp video being blocked
Mon Jan 14, 2019 7:11 pm
Wrong, I use whatsapp all the time behind my mikrotik. It has to be your ISP.
Looking at your rules its hard to figure out what you are doing wrt to DNS but if it works for you great.
I didnt realize 208.67.222. 123 or 208.67.220. [flash=]123[/flash] were valid servers.
I thought they were 208.67.220.220 and 208.67.222.222
Recommended to me that un-tracked is not required except for specific circumstances (tied in with specific raw rules).
These rules are not generally required. Assuming you have a basic LAN to WAN rule in there somewhere and a drop all else rule at the end, that traffic is not being blocked.
add action=accept chain=forward comment=»Whatsapp tcp» dst-port=443,4244,5222,5223,5228,5242,8443 out-interface-list=WAN protocol=tcp
add action=accept chain=forward comment=»whatsapp 2″ dst-port=59234,50318 protocol=tcp
add action=accept chain=forward comment=»whatsapp udp1″ dst-port=59234,50318 protocol=udp
add action=accept chain=forward comment=»whatsapp udp 2″ dst-port=3478,45395 protocol=udp
I don’t see one so add this rule.
add action=accept chain=forward comment=»ENABLE LAN to WAN» in-interface=\
bridge out-interface-list=WAN \
(If you only have one wan, then use out-interface=WAN)
What is the purpose of this Firewall rule.
add action=accept chain=input comment=»HTTP WAN Admin» dst-port=80 protocol=tcp
This rule normally is made to allow admin access to the router so take this one
add action=accept chain=input comment=winbox dst-port=8291 protocol=tcp
and change it to this
add action=accept chain=input comment=»Allow ADMIN to Router» \
in-interface-list=LAN src-address-list=adminaccess
(you will need to identify which IPs or blocks or subnets you should be able to access the router from within your LANs and in this case I named the list ‘adminaccess’).
(By the way, now we all know which port your Winbox runs on. I changed mine to a different number).
Change this rule as your last INPUT chain rule.
add action=drop chain=input comment=»defconf: drop all not coming from LAN» in-interface-list=!LAN
To
add action=drop chain=input comment=»DROP ALL ELSE»
Change this forward rule
add action=drop chain=forward comment=»defconf: drop all from WAN not DSTNATed» connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
To
add action=accept chain=forward comment=\
«Allow Port Forwarding» connection-nat-state=dstnat
and add a last rule to the forward chain
add action=drop chain=forward comment=\
«DROP ALL other FORWARD traffic»
Re: Whatsapp video being blocked
Fri Jan 18, 2019 9:36 pm
Re: Whatsapp video being blocked
Sat Jan 19, 2019 12:01 am
WhatsApp Calling and Video Calling been Blocked
Solution:
/ip firewall filter
add action=accept chain=forward comment=»Allow Whatsapp address list» dst-address-list=whatsapp_list
/ip firewall address-list
add address=31.13.64.51 list=whatsapp_list
add address=31.13.65.48 list=whatsapp_list
add address=31.13.65.49 list=whatsapp_list
add address=31.13.66.49 list=whatsapp_list
add address=31.13.66.53 list=whatsapp_list
add address=31.13.67.51 list=whatsapp_list
add address=31.13.68.52 list=whatsapp_list
add address=31.13.69.240 list=whatsapp_list
add address=31.13.70.49 list=whatsapp_list
add address=31.13.71.48 list=whatsapp_list
add address=31.13.71.49 list=whatsapp_list
add address=31.13.72.52 list=whatsapp_list
add address=31.13.73.49 list=whatsapp_list
add address=31.13.74.49 list=whatsapp_list
add address=31.13.75.52 list=whatsapp_list
add address=31.13.76.81 list=whatsapp_list
add address=31.13.77.49 list=whatsapp_list
add address=31.13.78.53 list=whatsapp_list
add address=31.13.80.53 list=whatsapp_list
add address=31.13.81.53 list=whatsapp_list
add address=31.13.82.51 list=whatsapp_list
add address=31.13.83.51 list=whatsapp_list
add address=31.13.84.51 list=whatsapp_list
add address=31.13.85.51 list=whatsapp_list
add address=31.13.86.51 list=whatsapp_list
add address=31.13.87.51 list=whatsapp_list
add address=31.13.88.49 list=whatsapp_list
add address=31.13.90.51 list=whatsapp_list
add address=31.13.91.51 list=whatsapp_list
add address=31.13.92.52 list=whatsapp_list
add address=31.13.93.51 list=whatsapp_list
add address=31.13.94.52 list=whatsapp_list
add address=31.13.95.63 list=whatsapp_list
add address=50.22.198.204/30 list=whatsapp_list
add address=50.22.210.32/30 list=whatsapp_list
add address=50.22.210.128/27 list=whatsapp_list
add address=50.22.225.64/27 list=whatsapp_list
add address=50.22.235.248/30 list=whatsapp_list
add address=50.22.240.160/27 list=whatsapp_list
add address=50.23.90.128/27 list=whatsapp_list
add address=50.97.57.128/27 list=whatsapp_list
add address=75.126.39.32/27 list=whatsapp_list
add address=108.168.174.0/27 list=whatsapp_list
add address=108.168.176.192/26 list=whatsapp_list
add address=108.168.177.0/27 list=whatsapp_list
add address=108.168.180.96/27 list=whatsapp_list
add address=108.168.254.65 list=whatsapp_list
add address=108.168.255.224 list=whatsapp_list
add address=108.168.255.227 list=whatsapp_list
add address=157.240.0.53 list=whatsapp_list
add address=157.240.1.53 list=whatsapp_list
add address=157.240.2.53 list=whatsapp_list
add address=157.240.3.53 list=whatsapp_list
add address=157.240.6.53 list=whatsapp_list
add address=157.240.7.54 list=whatsapp_list
add address=157.240.8.53 list=whatsapp_list
add address=157.240.9.53 list=whatsapp_list
add address=157.240.10.53 list=whatsapp_list
add address=157.240.11.53 list=whatsapp_list
add address=157.240.12.53 list=whatsapp_list
add address=157.240.13.54 list=whatsapp_list
add address=158.85.0.96/27 list=whatsapp_list
add address=158.85.5.192/27 list=whatsapp_list
add address=158.85.46.128/27 list=whatsapp_list
add address=158.85.48.224/27 list=whatsapp_list
add address=158.85.58.0/25 list=whatsapp_list
add address=158.85.61.192/27 list=whatsapp_list
add address=158.85.224.160/27 list=whatsapp_list
add address=158.85.233.32/27 list=whatsapp_list
add address=158.85.249.128/27 list=whatsapp_list
add address=158.85.254.64/27 list=whatsapp_list
add address=169.44.23.192/27 list=whatsapp_list
add address=169.44.36.0/25 list=whatsapp_list
add address=169.44.57.64/27 list=whatsapp_list
add address=169.44.58.64/27 list=whatsapp_list
add address=169.44.80.0/26 list=whatsapp_list
add address=169.44.82.96/27 list=whatsapp_list
add address=169.44.82.128/27 list=whatsapp_list
add address=169.44.82.192/26 list=whatsapp_list
add address=169.44.83.0/26 list=whatsapp_list
add address=169.44.83.96/27 list=whatsapp_list
add address=169.44.83.128/27 list=whatsapp_list
add address=169.44.83.192/26 list=whatsapp_list
add address=169.44.84.0/24 list=whatsapp_list
add address=169.44.85.64/27 list=whatsapp_list
add address=169.44.87.160/27 list=whatsapp_list
add address=169.44.167.0/27 list=whatsapp_list
add address=169.45.71.32/27 list=whatsapp_list
add address=169.45.71.96/27 list=whatsapp_list
add address=169.45.87.128/26 list=whatsapp_list
add address=169.45.169.192/27 list=whatsapp_list
add address=169.45.182.96/27 list=whatsapp_list
add address=169.45.210.64/27 list=whatsapp_list
add address=169.45.214.224/27 list=whatsapp_list
add address=169.45.219.224/27 list=whatsapp_list
add address=169.45.237.192/27 list=whatsapp_list
add address=169.45.238.32/27 list=whatsapp_list
add address=169.45.248.96/27 list=whatsapp_list
add address=169.45.248.160/27 list=whatsapp_list
add address=169.46.52.224/27 list=whatsapp_list
add address=169.46.111.144/28 list=whatsapp_list
add address=169.47.5.192/26 list=whatsapp_list
add address=169.47.6.64/27 list=whatsapp_list
add address=169.47.33.128/27 list=whatsapp_list
add address=169.47.35.32/27 list=whatsapp_list
add address=169.47.37.128/27 list=whatsapp_list
add address=169.47.40.128/27 list=whatsapp_list
add address=169.47.42.96/27 list=whatsapp_list
add address=169.47.42.160/27 list=whatsapp_list
add address=169.47.42.192/26 list=whatsapp_list
add address=169.47.47.160/27 list=whatsapp_list
add address=169.47.130.96/27 list=whatsapp_list
add address=169.47.192.192/27 list=whatsapp_list
add address=169.47.194.128/27 list=whatsapp_list
add address=169.47.198.128/27 list=whatsapp_list
add address=169.47.212.160/27 list=whatsapp_list
add address=169.53.29.128/27 list=whatsapp_list
add address=169.53.48.32/27 list=whatsapp_list
add address=169.53.71.224/27 list=whatsapp_list
add address=169.53.81.64/27 list=whatsapp_list
add address=169.53.250.128/26 list=whatsapp_list
add address=169.53.252.64/27 list=whatsapp_list
add address=169.53.255.64/27 list=whatsapp_list
add address=169.54.2.160/27 list=whatsapp_list
add address=169.54.44.224/27 list=whatsapp_list
add address=169.54.51.32/27 list=whatsapp_list
add address=169.54.55.192/27 list=whatsapp_list
add address=169.54.193.160/27 list=whatsapp_list
add address=169.54.210.0/27 list=whatsapp_list
add address=169.54.222.128/27 list=whatsapp_list
add address=169.55.67.224/27 list=whatsapp_list
add address=169.55.69.128/26 list=whatsapp_list
add address=169.55.74.32/27 list=whatsapp_list
add address=169.55.75.96/27 list=whatsapp_list
add address=169.55.100.160/27 list=whatsapp_list
add address=169.55.126.64/26 list=whatsapp_list
add address=169.55.210.96/27 list=whatsapp_list
add address=169.55.235.160/27 list=whatsapp_list
add address=173.192.162.32/27 list=whatsapp_list
add address=173.192.219.128/27 list=whatsapp_list
add address=173.192.222.160/27 list=whatsapp_list
add address=173.192.231.32/27 list=whatsapp_list
add address=173.193.205.0/27 list=whatsapp_list
add address=173.193.230.96/27 list=whatsapp_list
add address=173.193.230.128/27 list=whatsapp_list
add address=173.193.230.192/27 list=whatsapp_list
add address=173.193.239.0/27 list=whatsapp_list
add address=174.36.208.128/27 list=whatsapp_list
add address=174.36.210.32/27 list=whatsapp_list
add address=174.36.251.192/27 list=whatsapp_list
add address=174.37.199.192/27 list=whatsapp_list
add address=174.37.217.64/27 list=whatsapp_list
add address=174.37.243.64/27 list=whatsapp_list
add address=174.37.251.0/27 list=whatsapp_list
add address=179.60.192.51 list=whatsapp_list
add address=179.60.195.51 list=whatsapp_list
add address=184.173.136.64/27 list=whatsapp_list
add address=184.173.147.32/27 list=whatsapp_list
add address=184.173.161.64 list=whatsapp_list
add address=184.173.173.116 list=whatsapp_list
add address=184.173.179.32/27 list=whatsapp_list
add address=185.60.216.53 list=whatsapp_list
add address=185.60.218.53 list=whatsapp_list
add address=185.60.219.53 list=whatsapp_list
add address=192.155.212.192/27 list=whatsapp_list
add address=198.11.193.182/31 list=whatsapp_list
add address=198.11.251.32/27 list=whatsapp_list
add address=198.23.80.0/27 list=whatsapp_list
add address=208.43.115.192/27 list=whatsapp_list
add address=208.43.117.79 list=whatsapp_list
add address=208.43.122.128/27 list=whatsapp_list
Re: Whatsapp video being blocked
Sat Jan 19, 2019 2:23 am
What are you doing?
All those rules basically make a great gaping hole in your security plan.
All those IP addresses if coming from the WAN side external now have access to all your devices
THe default setup on a MT router DOES NOT BLOCK WHATSAPP!!
Your configuration if changed from default is the cause of the issue
OR
Your ISP blocks whatsapp.
Ive used whatsapp for years, fine with two hex routers and now an RB450Gx4.
I just tested two of us behind the router via wifi and then one of us on wifi and the other using cellular data.
Works great for text, call and video call.
The more mess you make of rules the worse its going to be with all kinds of unexpected results.
Источник